PT-2024-39934 · Huangdou · Huangdou Utcms

Name of the Vulnerable Software and Affected Versions: HuangDou UTCMS version V9 Description: A critical issue was found in HuangDou UTCMS, affecting an unknown part of the file app/modules/ut-template/admin/template creat.php. The manipulation of the content argument leads to deserialization. It...

PT-2024-39935 · Unknown · Huangdou Utcms

Name of the Vulnerable Software and Affected Versions: HuangDou UTCMS version V9 Description: A critical vulnerability has been found in the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiated...

UTCMS 操作系统命令注入漏洞

UTCMS is a content management system built on the UT framework by the individual developer of visualtool. UTCMS V9 suffers from an OS command injection vulnerability that stems from improper handling of parameters, resulting in os command injection...

PT-2024-39933 · Huangdou · Huangdou Utcms

Name of the Vulnerable Software and Affected Versions: HuangDou UTCMS version V9 Description: A critical issue has been found in HuangDou UTCMS, affecting some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. Thi...

UTCMS 代码问题漏洞

UTCMS is a content management system built on the UT framework by the individual developer of usaltool. A code issue vulnerability exists in UTCMS V9 that stems from mishandling of parameters, leading to deserialization...

CVE-2024-9916: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. The attack may be launched remotely. The...